https://vulnogram.org/ Most recent CVEs assigned by vdoo (vdoo). https://vulnogram.org/seaview/icons/vdoo.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:08 GMT https://vulnogram.org/CVE-2020-27304 https://vulnogram.org/CVE-2020-27304 The CivetWeb web library does not validate uploaded filepaths when running on an OS other than Windows, when using the built-in HTTP form-based file upload mechanism, via the mg_handle_form_request API. Web applications that use the file upload form… Thu, 21 Oct 2021 15:42:23 GMT https://vulnogram.org/CVE-2020-27302 https://vulnogram.org/CVE-2020-27302 A stack buffer overflow in Realtek RTL8710 (and other Ameba-based devices) can lead to remote code execution via the "memcpy" function, when an attacker in Wi-Fi range sends a crafted "Encrypted GTK" value as part of the WPA2 4-way-handshake. Fri, 04 Jun 2021 12:24:41 GMT https://vulnogram.org/CVE-2020-27301 https://vulnogram.org/CVE-2020-27301 A stack buffer overflow in Realtek RTL8710 (and other Ameba-based devices) can lead to remote code execution via the "AES_UnWRAP" function, when an attacker in Wi-Fi range sends a crafted "Encrypted GTK" value as part of the WPA2 4-way-handshake. Fri, 04 Jun 2021 12:24:37 GMT https://vulnogram.org/CVE-2020-25853 https://vulnogram.org/CVE-2020-25853 The function CheckMic() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size parameter for an internal function, _rt_md5_hmac_veneer() or _rt_hmac_sha1_veneer(), resulting… Wed, 03 Feb 2021 16:49:20 GMT https://vulnogram.org/CVE-2020-25854 https://vulnogram.org/CVE-2020-25854 The function DecWPA2KeyData() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size parameter for an internal function, rt_arc4_crypt_veneer() or _AES_UnWRAP_veneer(), resu… Wed, 03 Feb 2021 16:49:08 GMT https://vulnogram.org/CVE-2020-25855 https://vulnogram.org/CVE-2020-25855 The function AES_UnWRAP() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size parameter for a memcpy() operation, resulting in a stack buffer overflow which can be exploi… Wed, 03 Feb 2021 16:49:05 GMT https://vulnogram.org/CVE-2020-25856 https://vulnogram.org/CVE-2020-25856 The function DecWPA2KeyData() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size parameter for an rtl_memcpy() operation, resulting in a stack buffer overflow which can… Wed, 03 Feb 2021 16:49:02 GMT https://vulnogram.org/CVE-2020-25857 https://vulnogram.org/CVE-2020-25857 The function ClientEAPOLKeyRecvd() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size parameter for an rtl_memcpy() operation, resulting in a stack buffer overflow which… Wed, 03 Feb 2021 16:48:59 GMT https://vulnogram.org/CVE-2020-25860 https://vulnogram.org/CVE-2020-25860 The install.c module in the Pengutronix RAUC update client prior to version 1.5 has a Time-of-Check Time-of-Use vulnerability, where signature verification on an update file takes place before the file is reopened for installation. An attacker who ca… Mon, 21 Dec 2020 17:23:27 GMT https://vulnogram.org/CVE-2020-25859 https://vulnogram.org/CVE-2020-25859 The QCMAP_CLI utility in the Qualcomm QCMAP software suite prior to versions released in October 2020 uses a system() call without validating the input, while handling a SetGatewayUrl() request. A local attacker with shell access can pass shell metac… Thu, 15 Oct 2020 15:12:56 GMT https://vulnogram.org/CVE-2020-25858 https://vulnogram.org/CVE-2020-25858 The QCMAP_Web_CLIENT binary in the Qualcomm QCMAP software suite prior to versions released in October 2020 does not validate the return value of a strstr() or strchr() call in the Tokenizer() function. An attacker who invokes the web interface with… Thu, 15 Oct 2020 15:11:50 GMT